Privacy Policy

Website:

Responsible person:

Nadine Beckmann / NAGIC MEDIA

Address: Hanielstr. 23a, 45327 Essen, Germany

E-mail:

Last updated: 24 August 2026

1. General Information

The protection of your personal data is important to us.

This Privacy Policy explains what personal data may be processed when you visit or use the website of NAGIC MUSIC, for what purposes such data may be processed, the legal bases for such processing, and what rights you have under applicable data protection law, in particular the EU General Data Protection Regulation (GDPR).

This Privacy Policy applies to the following website:

https://nagicmusic.lovable.app

We process personal data only where there is a legal basis for doing so and only to the extent necessary for the respective purpose.

We do not sell personal data.

2. Controller

The controller responsible for the processing of personal data on this website within the meaning of Article 4(7) GDPR is:

Nadine Beckmann – NAGIC MEDIA
Hanielstr. 23a
45327 Essen
Germany

E-mail:

NAGIC MUSIC is the music-related name and project designation operated by Nadine Beckmann / NAGIC MEDIA.

If you have any questions regarding the processing of your personal data, you may contact us directly at the e-mail address above.

3. What is Personal Data?

Personal data means any information relating to an identified or identifiable natural person.

This may include, depending on how you use the website:

• IP address;
• date and time of access;
• browser type and version;
• operating system;
• device information;
• technical connection information;
• pages and content accessed;
• referring URL;
• technical log and security information;
• information submitted voluntarily by you;
• your name, if you provide it;
• your e-mail address, if you contact us;
• and the content of your communication with us.

Not every category of data listed above is necessarily collected in every visit or in every interaction. The actual data processed depends on the technical configuration of the website and on the functions you use.

4. Visiting the Website

When you access the NAGIC MUSIC website, technical information may automatically be processed by the infrastructure required to deliver the website to your browser.

This may include, in particular:

• IP address;
• date and time of access;
• requested page or resource;
• browser information;
• operating system;
• device and connection information;
• referring page;
• technical error information;
• security and server log information.

This processing may be necessary to deliver the website, establish and maintain a secure connection, protect the website against misuse and attacks, detect technical errors, maintain the stability and security of the website, and ensure the proper operation of the online service.

Where applicable, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, technically stable and functional operation of the website.

5. Hosting and Website Infrastructure – Lovable

The NAGIC MUSIC website was created and is operated using the Lovable platform. Lovable is an AI-powered software development and application deployment platform.

Depending on the technical configuration of the website and the services used, Lovable may process technical information, log data and other data required to provide, secure, maintain and operate its services.

Lovable states in its current privacy documentation that it may act as a processor when processing customer personal data on behalf of its customers. At the same time, Lovable may process certain service data, log data, aggregated data and de-identified data as an independent controller for purposes such as security, analytics, billing, service improvement and product development.

This distinction is important: NAGIC MEDIA remains responsible for the processing activities for which NAGIC MEDIA is the controller. Lovable remains responsible for processing activities that Lovable carries out independently as its own controller.

The technical processing performed by Lovable may involve infrastructure and sub-processors located in different countries. Lovable maintains information about its current sub-processors and their respective processing activities.

We cannot guarantee that the list of technical providers used by Lovable will remain unchanged. Technical service providers may be replaced or added as part of the ongoing operation and development of the platform.

6. International Data Transfers

Depending on the technical services and infrastructure used, personal data may be processed outside the European Economic Area (EEA).

Where personal data is transferred to a third country, such transfer must be based on an applicable legal mechanism under Articles 44 et seq. GDPR. Depending on the circumstances, this may include an adequacy decision of the European Commission, EU Standard Contractual Clauses, other legally recognized safeguards, or another mechanism permitted under applicable data protection law.

Lovable's current DPA documentation states that international transfers may be protected by appropriate transfer mechanisms, including the EU Standard Contractual Clauses where applicable.

Because the technical infrastructure of the website may change, the exact location of individual technical processing operations may also change over time.

7. Cookies and Similar Technologies

The website may use cookies or technically similar technologies. Cookies are small files or information stored on, or accessed from, your device.

Technically necessary technologies

Technically necessary cookies or similar technologies may be used where they are required to provide the website or a service explicitly requested by you.

Non-essential technologies

Cookies or similar technologies that are not technically necessary, for example certain analytics, marketing or tracking technologies, will only be used where the applicable legal requirements for consent have been fulfilled.

Under Section 25 of the German Telecommunications-Digital Services Data Protection Act (TDDDG), storing information on a user's device or accessing information already stored on the device generally requires consent unless a statutory exception applies, in particular where the technology is strictly necessary for a service explicitly requested by the user.

Where consent is required, you may withdraw your consent at any time with effect for the future.

8. No Unnecessary Analytics or Advertising

We do not intentionally include analytics, advertising or tracking services in this Privacy Policy merely for the sake of completeness. A service is only considered part of our data processing activities if it is actually technically implemented and activated on the website.

In particular, this Privacy Policy does not claim that Google Analytics, advertising trackers or similar services are used unless such services are actually implemented on the website.

If additional analytics, advertising or tracking technologies are introduced in the future, this Privacy Policy and, where necessary, the applicable consent mechanism will be updated accordingly.

9. Contact by E-mail

If you contact us by e-mail, the personal data contained in your message will be processed for the purpose of handling and responding to your request.

This may include your name, your e-mail address, the content of your message, attachments, and any other information you voluntarily provide.

We process this information only to the extent necessary to deal with your request. Depending on the nature of the request, the legal basis may be Article 6(1)(b) GDPR, where the communication concerns contractual or pre-contractual matters; Article 6(1)(f) GDPR, where we have a legitimate interest in responding to your request; or Article 6(1)(a) GDPR, where processing is based on your consent.

We do not require you to provide more personal information than is necessary for your inquiry.

10. External Links and Music Platforms

The NAGIC MUSIC website may contain links to external websites and platforms. These may include, for example, Spotify, Apple Music, Amazon, YouTube, social media platforms, music streaming services, online music stores, and other third-party services.

A normal external link does not necessarily establish a connection to the external provider merely because you visit our website. If you actively click an external link, you leave the NAGIC MUSIC website and may establish a connection with the external provider.

From that point onward, the respective provider is responsible for its own processing of personal data. The privacy policies of the respective third-party providers apply. We have no control over and assume no responsibility for the privacy practices, security measures, accessibility, tracking technologies or data processing activities of external websites.

11. No Purchases on the NAGIC MUSIC Website

The NAGIC MUSIC website does not itself process purchases of music, albums, downloads or other digital products unless a specific purchasing function is expressly introduced.

Where our website links to an external music service, streaming platform or online store, any purchase, subscription, streaming activity or other transaction takes place directly with the respective provider. We are not the contractual partner for transactions concluded between you and those external platforms.

We generally do not receive or process your payment information in connection with transactions carried out directly through those external providers. Any royalties, licensing income or other remuneration we may receive in connection with the exploitation of our music does not change the contractual relationship between you and the respective platform.

12. Social Media

The website may contain links to social media services. Where such elements are implemented merely as external links, the respective social-media service is not contacted merely by visiting our website. A connection is generally established only after you actively follow the relevant link. Once you leave our website, the privacy policy of the respective social-media provider applies.

13. Artificial Intelligence – Creation of Music

NAGIC MUSIC uses modern artificial intelligence technologies as a studio supplement and creative production tool. The music released under NAGIC MUSIC is conceived and creatively developed by us. AI tools may be used to support the creative and technical production process.

This may include, depending on the individual production, musical experimentation, sound design, arrangement assistance, production support, editing, refinement, mastering-related processes, generation or modification of individual musical elements, and other studio-related production tasks.

The use of AI does not mean that our music is simply generated automatically without human involvement. The musical concepts, creative direction, selection, arrangement and final production decisions remain under human control. AI is used as a technological extension of our studio workflow.

14. Human Creative Responsibility

NAGIC MUSIC takes responsibility for the music and content it publishes. AI-generated or AI-assisted elements may form part of a production, but the final decision as to whether, how and where such material is used is made by humans. We select, edit, arrange, combine, refine and/or approve the material used in our productions. Accordingly, AI should be understood as a creative and technical production aid, comparable to other modern studio tools, rather than as an autonomous legal or editorial decision-maker.

15. AI and Personal Data

The fact that we use AI tools in our music production does not mean that personal data of visitors to this website is automatically transmitted to AI providers. We do not intentionally submit personal data collected from website visitors to AI systems merely because AI is used in the creation of our music.

If you voluntarily provide personal data to us through an e-mail, contact function or another service, such data will only be transmitted to an AI provider where this is actually necessary, legally permitted and appropriately disclosed. We do not use personal data obtained from website visitors as a general source for creating our music.

16. AI-Generated or AI-Assisted Visual Content

Visual materials associated with NAGIC MUSIC, including cover artwork, promotional graphics or other illustrations, may be created with the assistance of artificial intelligence. Such AI tools are used as part of our creative production workflow. Where personal data is processed in connection with a particular AI tool, the relevant legal requirements will apply. The use of AI-generated artwork itself does not give us any additional right to collect or process personal data from website visitors.

17. No Automated Decision-Making

We do not use the website to make automated decisions concerning you that produce legal effects or similarly significantly affect you within the meaning of Article 22 GDPR. The use of AI in the creation or production of music and visual material does not constitute automated decision-making concerning website visitors.

18. Data Processing by Third-Party AI and Technology Providers

Where external technology or AI providers are used in connection with our creative workflow or technical infrastructure, the respective provider may process information in accordance with its own terms and privacy policy. The exact providers used may vary over time depending on the production tools and technical services selected. We do not represent that a specific AI provider is permanently used for every NAGIC MUSIC production. Where personal data is involved, we take reasonable steps to ensure that the processing is carried out on an appropriate legal basis and with appropriate safeguards.

19. Data Minimisation

We follow the principle of data minimisation. We do not intentionally collect personal data simply because it might be useful in the future. Where personal data is processed, we seek to limit the processing to what is necessary for the relevant purpose. You should therefore avoid including unnecessary personal information when contacting us.

20. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law. For example, correspondence may need to be retained for a reasonable period in order to respond to follow-up questions, document communications, establish or defend legal claims, or comply with legal obligations.

Once personal data is no longer required and no legal retention obligation applies, it will be deleted or anonymised as appropriate. Technical log data may be retained by infrastructure providers for periods determined by their technical, security, legal and operational requirements.

21. Legal Retention Obligations

Certain documents and communications may be subject to statutory retention requirements, particularly under German commercial, tax or accounting law. Where such obligations apply, personal data contained in the relevant records may have to be retained even if the original processing purpose has otherwise ceased. In such cases, processing is restricted to what is necessary to comply with the applicable legal obligation.

22. Your Rights under the GDPR

You have the following rights under applicable data protection law, subject to the relevant legal conditions:

• Right of access – You have the right to request confirmation as to whether personal data concerning you is being processed and, where applicable, to obtain access to that data and further information about the processing.
• Right to rectification – You have the right to request correction of inaccurate personal data.
• Right to erasure – You may request deletion of your personal data where the legal requirements for erasure are met.
• Right to restriction of processing – You may request restriction of processing where the legal requirements are met.
• Right to data portability – Under the applicable conditions, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format.
• Right to object – Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may object to processing on grounds relating to your particular situation. You may also object at any time to processing of personal data for direct marketing purposes.
• Right to withdraw consent – Where processing is based on consent, you may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

23. How to Exercise Your Rights

To exercise any of your rights, please contact:

Nadine Beckmann – NAGIC MEDIA
Hanielstr. 23a
45327 Essen
Germany

E-mail:

For security reasons, we may need to verify your identity before fulfilling certain requests. This is intended to prevent personal data from being disclosed to an unauthorised person.

24. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law. You may generally contact the supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

For NAGIC MEDIA, the competent supervisory authority in North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

25. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure, and other unlawful forms of processing. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted over the internet.

26. Third-Party Services and Changes to the Website

The technical structure of the website may change over time. We may add, remove or replace hosting services, technical infrastructure, embedded services, external links, analytics tools, security services, communication tools, or other technical providers. Where such changes materially affect the processing of personal data, this Privacy Policy will be updated where necessary. The version published on the website at the time of your visit applies.

27. Children

The NAGIC MUSIC website is not specifically designed to collect personal data from children. We do not knowingly request or intentionally collect unnecessary personal data from children. If a child or another person provides personal data to us unintentionally, a parent or legal guardian may contact us at nadimagic@icloud.com. We will assess the situation and, where legally required and technically possible, delete personal data that does not need to be retained.

28. No Sale of Personal Data

We do not sell personal data. We do not rent personal data to third parties. We do not intentionally provide personal data to third parties for their own direct-marketing purposes. Personal data may nevertheless be processed by technical service providers where this is necessary to provide, secure or maintain the website or to fulfil another legitimate purpose described in this Privacy Policy.

29. Separation Between NAGIC MUSIC Content and Website User Data

The creative content of NAGIC MUSIC and personal data belonging to website visitors are separate matters. The music, compositions, recordings, artwork and other creative works published by NAGIC MUSIC are produced and managed as part of our creative activities. The use of AI as a studio supplement in the creation or production of such works does not constitute a general collection or processing of personal data from website visitors. Your personal data is not required simply because you listen to or view NAGIC MUSIC content on this website.

30. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy where necessary. Changes may become necessary due to changes in applicable law, changes in regulatory requirements, changes to the website, changes to technical infrastructure, changes to service providers, introduction or removal of cookies or analytics, or changes in our data-processing activities. The current version of this Privacy Policy will be published on this website.

Last updated: 24 August 2026